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ABSTRACT 

In  this  paper  we  present  a  progress  report  on  our  work  on 
the  static  version  of  the  Weapon  to  Target  Assignment  (WTA) 
problem  in  which  vulnerable,  distributed  nodes  are  included 
in  the  formulation. 

In  the  static  defense  asset  problem  with  vulnerable  C^  nodes 
the  offense  is  allowed  to  attack  either  just  the  assets  or  first  the 
command  and  control  system  and  then  the  assets.  In  previous 
work  we  considered  only  command  and  control  nodes  that  were 
capable  of  assigning  any  defensive  weapon;  now  a  C^  node 
might  control  only  a  subset  of  weapons,  with  overlap  in  the 
spans  of  control  permi'ted  .  ^  problem  formulation  that  permits 
such  distribution  of  the  assignment  responsibility  is  presented, 
as  is  a  representative  architecture.  We  show  that  such 
duplication  of  C^  unambiguously  improves  the  capability  of  the 
defense.  Approximations  for  determining  both  the  attacker's 
and  defender's  stockpile  panition  for  the  two  stages  of  attack 
and  defense  are  given. 


1.  INTRODUCTION 

Our  overall  objective  is  to  develop  quantitative  insight  into 
the  vulnerability  of  distributed  C^  organizations.  In  this  work 
we  use  the  allocation  of  weapons  to  targets  as  a  paradigm  for  the 
command  and  control  function  of  resource  commitment.  In  a 
previous  paper  the  basic  problem  was  introduced,  and  numerical 
results  for  certain  special  cases  were  given  (1).  For 
completeness  we  will  review  the  basic  problem  and  motivation. 

The  weapon-to-target  assignment  (WTA)  problem  quite 
simply  entails  optimally  assigning  weapons  to  mgets  so  as  to 
maximize  (or  minimize)  one  of  several  cost  functions,  and  it  is  a 
hard  problem  [2].  A  variant  on  the  basic  problem  is  to  ^locate 
defensive  interceptors  against  offensive  forces  so  as  m  minimize 
the  damage  done  to  defensive  assets.  Such  a  decision  m^ng 
process  is  traditionally  assumed  to  be  performed  by  a  single, 
global  node  that  is  itself  not  subject  to  attack,  with  decision 
outcomes  being  communicated  to  the  appropriate  resources.  The 
survival  of  such  control  nodes  is  essential  for  the  defense  to 
perform  effectively;  their  destruction  would  render  defensive 
weapons  unusable.  The  vulnerability  of  this  process  can  be 
reduced  by  hardening  the  nodes,  replicadiig  their  functions, 
altering  their  orbits/positions  (if  they  are  mobile),  or  by  allowing 
them  to  shoot  back  if  attacked.  We  have  formulated  a  nnodel  that 
includes  redundant,  vulnerable  C?  nodes  that  will  be  defended  if 
fttar-M  While  considedrable  work  has  been  done  on  the  asset- 
based  WTA  problem  [3-14],  virtually  no  consideration  has  been 
given  to  system  vulnerability  [1,8]. 

This  work  is  motivated  by  military  defense  problems,  a 
couple  of  examples  of  which  are  the  mid-course  phase  of  a 
strategic  defense  and  the  defense  of  a  naval  battle  group.  In  the 
former  example  the  decision  making  capability  would  be 

- a- 


represented  by  the  battle  management  computen  that  prioritize 
targets  and  allocate  the  various  elements  of  the  defensive  arsenal 
to  incoming  targets.  Also  vulnerable  are  the  space  and  ground 
based  satellite  tracking  systems.  When  engaging  targets,  he 
defense  will  be  able  to  see  which  nodes  and  defensive  assets 
have  been  selected  by  the  offense  prior  to  having  to  allocate  its 
own  resources.  Defensive  assets  would  be  such  things  as 
military  installations,  population  centers,  the  defense's  own 
ICBM  force,  etc.  The  defense  can  increase  the  survivability  of 
its  C?  system  by  the  means  noted  above:  hardening,  replication, 
orbital  selection  or  by  defending  itself. 

The  defense  of  a  itaval  battle  group  against  air  attack 
presents  another  relevant  scenario.  Etefensive  assets  would  be 
an  aircraft  carrier,  troop  or  material  transpons,  and  escon  or 
suppon  ships.  The  objective  of  the  defense  would  be  to 
maximize  the  expeaed  surviving  value  of  these  assets.  Elements 
of  centralized  command  and  conffol  might  be  performed  in  an 
aircraft  based  radar  platform  such  as  an  E-2C;  were  it  destroyed 
or  out  of  position,  however,  its'  functions  would  need  to  be 
performed  at  the  individual  weapon  platforms.  These  distributed 
decision  makers  would  then  face  the  problem  of  access  to  fewer 
and  less  reliable  sources  of  track  information,  which  would 
effectively  serve  to  degrade  the  kill  probabilities  for  their 
weapons. 

2.  ..THEASSET-JASEPSyiAfRQBLEM 

We  consider  the  following  basic  defense  asset  problem.  A 
collection  of  separated  point  targets  is  to  be  defended  against  an 
attack  in  which  offensive  weapons  arrive  simultaneously.  The 
defense  has  area  interceptors,  each  of  which  is  capable  of 
defending  any  asset.  In  addition,  the  defense  has  "last  move" 
status,  i.e.  the  defense  can  observe  the  intended  targets  of  the 
offensive  .weapons  prior  to  allocating  it's  interceptors.  The 
offense  seeks  to  minimize,  and  the  defense  to  maximize,  the 
expected  surviving  defense  asset  value.  The  result  is  a  min-max 
pr^lem. 

Our  interest  in  this  problem  is  a  version  in  which  vulnerable 
nodes  are  included.  The  defensive  weapons  are  controlled 
by  a  set  of  command  and  control  nodes  diat  are  themselves 
subject  to  a  precursor  attack.  Redundancy  and  overlap  in  the 
spans  of  control  of  the  nodes  reduce  the  likelihood  that 
interceptors  will  be  rendered  useless  by  a  successful  attack  on 
the  bame  management  system.  Both  the  offense  and  defense 
may  choose  to  assign  some  of  their  resources  to  such  a  first 
phm  enpgemenL 

We  introduce  the  following  notation; 

M  >  Number  of  defensive  weapons 
N  B  Number  of  targets  (offensive  weapons) 

K  «  Number  of  assets 
w^  »  Value  of  asset  t 

T  =  Number  of  (?  nodes 

ict|  s  Probability  that  a  target  kills  node  t 
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jtkj^  =  Probability  that  a  target  kills  asset  <: 
p .  =  Probability  that  weapon  j  kills  target  i 

=  Set  of  weapons  used  to  defend  nodes 
Mp  =  Number  of  weapons  in  tiij. 

Mk  =  M-Mt=  Number  of  weapons  left  to  defend  assets 
ntj  =  Number  of  targets  aimed  at  (?  node  r,  X  nt  =N^ 

nkjj  =  Number  of  targets  aimed  at  asset  k\  Z^nk^=Nn 
X. .  =  1  if  weapon  j  is  assigned  to  target  i,  0  otherwise 

This  yields  the  following  basic  defense  asset  problem; 

min  max  /  .w^  ~  “Py)  ^ 

^  X  k*l  i-i  j"' 

subject  to  (stockpile  constraints): 

=  N  (2) 

e‘'Xe  =  M  (3) 

x..e{0,l}Vij  and  nk^eZ^  (4) 

is  the  offensive  strategy  vector  consisting  of  the  nkj,'s;  X  is  a 
defensive  strategy  matrix  consisting  of  the  x..'s.  c  is  a  column 
■vector  of  ones  of  conformable  dimension.  “  denotes  transpose. 


We  first  considered  [1]  a  generalization  of  the  basic  problem 
(l)-(4)  in  which  defensive  weapons  are  controlled  by  T  C? 
nodes,  any  surviving  one  of  which  can  assign  any  defensive 
weapon.  This  represents  replication  of  functions  in  "global" 
nodes.  The  offense  can  then  either  attack  only  the  assets,  or 
first  attack  the  nodes  and  then  the  assets.  TTie  defense,  in 
turn,  has  a  choice  on  how  to  split  its  weapons  in  defending  the 
nodes  and  assets  -  after  the  offense  has  revealed  its  strategy. 
In  a  wcapons-poor  (or  target-rich)  environment,  preferential 
defense  can  be  employed  for  both  the  nodes  and  assets. 

This  results  in  a  new  objective  function:  expected  asset 
surviving  value 

U  =  ^V„-Kl-^)Vp  (5) 

where  the  probability  that  all  nodes  are  destroyed,  is  given 
by 

T  M 

l«l  i”l  j«t 

and  Vu,  the  expecting  surviving  asset  value  if  the  assets  are 
undefended,  is 

v.-iw,n(i-itk^)  (7) 

k~l  ial 

Vq  is  the  surviving  defended  asset  value,  which  remains  the 
same  as  in  the  basic  problem.  The  defense  seeks  to  maximize  U 
and  the  offense  seeks  to  minimize  it,  subject  to  their  respective  , 
stock^e  consnints.  In  [1],  optinaal  offensive  and  defensive 
allocations  for  the  special  case  m  identically  valued  assets,  equal 


kill  probabilities  and  uniform  attack  were  computed  using  an 
enumerative  marginal  return  algorithm,  and  then  plots  were 
made  of  the  resultant  strategies.  Some  conclusions  were  drawn 
from  the  computational  work,  such  as  that  greater  numbers  and 
more  effective  defensive  weapons  discourage  attack  of  the 
nodes,  as  well  as  that  whether  or  not  the  offense  attacks 
nodes  depends  on  problem  parameters.  Because  of 
'  combinatorial  explosion  in  the  number  of  feasible  strategies, 
however,  such  computations  can  only  be  made  for  small  scale 
examples  with  such  simplifying  assumptions. 

For  the  special  case  described  above,  approximate  formulas 
that  reflect  how  strategies  change  with  kill  probabilities  and 
stockpile  size  have  been  developed.  The  objective  is  to  try  to 
calculate  the  offensive  and  defensive  reaction  sets,  i.e.  the  set  of 
responses  (strategies)  for  opposing  moves.  Even 
approximations  for  this  scenario  are  difficult  to  develop, 
however,  since  Vp  is  neither  concave  nor  convex  in  defensive 
weapon  assignments.  Consider  the  continuous  variable  version 
of  the  probability  of  survival  for  an  asset,  (l-iik(l-p)*k)"'', 
where  nk€  is  the  number  of  attackers  and  Xk^)  is  the  number 
of  defenders  per  attacker  at  asset  k.  The  second  derivative  of 
this  quantity  is: 

nk[l-7tk(l-p)*k]nk-2[jik(l-p)=‘lt][ln(l-p)]2[nkx7tk(l-p)*k-l]. 
This  is  convex  if  the  final  term  is  positive,  concave  if  it  is 
negative;  the  change  occurs  at  Xk*=-ln(nkxjtk)/ln(l-p).  Between 
values  of  Xk  that  are  integral  multiples  of  nk,  this  probability  is 
strictly  convex. 

Because  the  objective  function  is  not  concave,  a  greedy 
algorithm  cannot  be  optimal  for  the  defender.  This  is  an 
algorithm  that  calls  for  the  defender  to  assign  his  next  weapon, 
or  clump  of  weapons,  to  thef  target  that  provides  him  with  the 
greatest  incremental  contribution  to  expected  surviving  asset 
value.  This  approach  does  perform  well  in  general  for  the  basic 
defense  asset  problem,  and  is  optimal  for  some  cases.  We  can 
use  it  to  derive  an  approximation  for  the  size  of  a  preferential 
defense  in  a  weapons-poor  or  target-rich  environment:  a 
randomly  selected  subset  of  assets  the  heavy  defense  of  which 
yields  greater  surviving  value  than  if  all  assets  were  more  lightly 
defended. 


Number  of  Elefended  » - — 

Assets  (N^/K>y 


where  Y=r- 


ln(JiN^/K)^ 

In(l-p) 


The  partition  of  the  defensive  stockpile  between  asset  and  C’ 
defense  when  each  node  is  capable  of  assigning  any  weapon 
is  given  by 

-M/tN/n 

M i  ,,, 

-jdn(l^) 


subject  to:  M,.  +  Mjj  =  M  (10) 

The  defense  defends  only  one  randomly  selected  node  with 
Mf  weapons.  Not  knowing  which  one  will  be  defended,  the 
offense  must  attack  them  ail  evenly.  The  principal  assumption 
needed  for  this  result  is  that  undefended  assets  /nodes  are  alnx>st 
surely  destroyed,  allowing  us  to  neglect  those  terms.  (9)-(10) 
are  then  produced  using  a  Lagrange  multiplier  technique. 

This  approach  is  extendable  to  the  off^ensive  partition.  For  a 


3 


uniform  attack  (within  stages),  the  offensive  partition  between 
and  asset  attacks  is  given  by 

-^nln(-^jt) 


ln(l-(N^/K)‘V((NK/K)-l)'’]] 


subject  to; 


Nt  +  N^  = 


Solution  of  (9)-(12)  gives  local  optima  for  Nx  &  and  & 
Mk  in  the  case  of  equal  valued  assets,  uniform  kill  probabilities, 
global  command  and  control  and  preferential  defense.  These 
provide  good  agreement  with  the  numerical  results  obtained  in 
[1], 


We  now  generalize  the  asset-based  WTA  problem  with 
vulnerable  further,  to  include  command  and  control  nodes 
that  may  not  be  capable  of  assigning  all  weapons.  Thus  we 
speak  of  the  "distribution"  of  control.  A  particular  weapon 
could  be  controlled  by  many  (but  not  necessarily  all)  nodes. 
A  node  with  a  limited  span  of  control  might  correspond  to  a 
reserve  capability  for  the  allocation  of  a  particular  weapon  cluster 
or  type.  A  manned  fire  unit  will  almost  certainly  have  the 
capability  to  make  weapon  assignments  for  terminal 
engagements  in  defense  of  itself. 


Additional  notation  is  needed.  Let  Q  be  the  set  of  all  T-fold 
combinations  of  nodes  that  survive  the  precursor  attack,  ft  is 
of  cardinality  2'*',  and  each  element  is  a  T  dimensional  binary 
column  vector  denoted  by  o).  If  to,  =  1,  then  node  r 
survived;  if  to,  =  0,  then  it  did  not.  If  T  =  3,  for  example,  then 
ft  consists  of  the  following: 

,[0]  [0]  [O'!  [ii  foi  rn  [ii  rill 

{  0  0  1  0  1  0  1  1  i 

'•  J’[oJ’[oJ’[lJ’[lJ’[oJ'[lJ  ■’ 

The  probability  that  a  particular  to  is  realized  will  be  denoted  by 
^  and  is  given  by: 

nij 

(13) 

tlm-o  *“•  j-‘ 

'Aie  flrst  product  term  taken  over  t  computes  the  probability  of 
the  specified  nodes  surviving,  the  second  the  probability  of 
their  complement  being  destroyed.  =  1,  and  hence 

represents  a  probability  density  function  over  the  sample  space 


^ch  combination  of  surviving  C?  nodes  will  induce  a  set  of 
"available"  weapons  for  asset  defense.  These  resulting  sets  of 
weapons  need  be  neither  unique  nor  mutually  exclusive,  and  for 
most  (?  architectures  won't  be.  The  function  g:  ft-»0  will  be 
used  to  represent  the  mapping  fiom  C?  survival  modes  to  sets  of 
indices  of  available  or  "active"  weapons  (0  is  the  index  set  of 
the  defensive  weapons).  Each  possible  combination  of 
surviving  nodes  produces  a  set  of  weapons  that  can  be 
assigned  to  targets  in  the  asset  defense  stage,  and  g  specifies 
what  that  set  is.  Thus  g  is  a  point-to-set  map  from  ft  to  0.  g 

captures  the  character  of  different  organizational  architectures  -  a 
control  node  of  limited  scope  would  "map"  back  only  to  those 
weapons  that  it  can  assign. 

Surviving  asset  value,  for  a  given  O),  is: 

K 

-"‘Sjld  -  P/')  (14) 

k»l  i«l  jcftu) 

jenvj. 

Thus  at  asset  k  the  defense  can  employ  interceptors  controlled 
by  surviving  nodes  (je  g(to))  that  were  not  used  for  BM/C^ 
defense  (j«  rr>x). 

The  resulting  optimization  problem  is: 


subject  to: 


min  max  /  t  \ 


Aje  +  A“e  =  N 
c^e  =  M 


{0, 1 }  V  i  j  and  nt,,nk^e  (18) 

where  Ay  is  the  strategy  vector  consisting  of  the  nij's. 
Constrmnts  (16)-07)  are  the  "shot  conservation"  constraints. 

It  is  instructive  to  see  the  form  that  the  objective  function 
takes  for  a  specific  command  and  control  architecture  that 
doesn't  consist  exclusively  of  global  decision  makers.  Consider 
the  case  where  there  is  a  single  global  node,  and  T-1 
additional  nodes  that  each  control  an  equal  number  of  defensive 
weapons.  The  T-1  sets  of  weapons  are  mutually  exclusive  and 
collectively  exhaustive.  There  will  then  be  2T  different  failure 
modes  for  the  C?  nodes,  of  which  contain  the  global  node. 
The  objective  function  will  take  this  form: 


Surviving  Value  ^ 


^  . 
(1  -Kkjld-Pjp^ 


k-1  ial  j»l 


yo=M-Mj 
yb“  jCM-Mj.) 


(23) 


^b=(  fill -"‘11(1 

i«l  j=l 

,  Jli  ”  X  ,T-!)-I 

{i-nn-^trid-py)'’)}  ^ 

i-i  j.i 

""o  M 

{i-nii-"‘Gn(i-Pij) )}  (24) 

i.i  >1 

G  indexes  the  global  ■?  node;  Ttt,  is  taken  to  be  the  same  for  the 
non-global  nodes  and  thus  the  coiresponding  nt^'s  are  the 
same  by  symmetry,  b  is  the  number  of  them  that  survive  the 
first  stage  attack,  y^,  reflects  that  some  of  the  weapons  for  which 
viable  command  and  control  exists  in  the  second  stage  will  have 
been  fired  in  defense  of  the  system  in  the  first  stage. 

It  can  readily  be  shown  that  this  distributed  formulation 
reduces  to  the  problem  previously  considered  for  the  case  of 
redundant,  centralized  command  and  control  (equations  (5)-(7) 
plus  stockpile  constraints).  Distribution  yields  an  inherently 
more  complex  system,  however.  If  the  defensive  stockpile  is 
split  equally,  with  each  half  controlled  by  two  nodes,  we  do  not 
get  a  separable  problem:  system  performance  depends  on  the 
performance  of  both  weapon  sets. 

4.2  Discussion 

Is  the  presence  of  additional  decision  makers  of  benefit?  As 
has  been  noted,  the  distribution  or  replication  of  functions  is 
considered  desirable,  although  there  is  little  quandfication  of  the 
advantages.  In  the  case  of  the  weapon-target  assignment 
function  we  have  the  following  theorem. 

Theorem  4.1:  The  d^ense  will  always  perform  better  with 
two  or  nwre  global  nodes  than  with  one. 

Proof:  Let  z',  A*  and  be  the  optimal  game  and  decision 
variable  values  for  the  vulnerable  defense  asset  problem  with 
one  global  node,  which  we  will  call  problem  P*.  (A 
represents  the  concatenation  of  A^  and  An).  Similarly,  z*.  A* 
and  X*  are  the  optimal  values  for  problem  P^,  reflecting  the 
same  problem  with  two  or  more  C?  nodes  (we  will  assume  there 
to  be  two  without  loss  of  generality).  We  must  show  that  there 
exist  defensive  strategies  for  P^  such  that  for  all  possible 
offensive  allocations,  z*>z‘  results. 

The  probability,  that  both  nodes  fail  in  P',  given 

Nr.is: 

nJ.  ^ 

^‘=i-ri(i-"‘na-Pij)*^ 

fNyil  „ 

>i-nti-"‘n(i-py)*^ 

i>i  j“> 

U1  j*l 


=  ^o  (25) 

The  final  quantity  in  (3.16)  is  ^  for  the  optimal  P^  offensive 
strategy  against  the  defensive  strategy  X*  (given  this  partition  of 
N*  into  Nf*  and  Nq*)-  That  splitting  N-r*  as  equally  as  possible 

between  nodes  is  optimal  for  the  offense  (if  faced  with  X') 
follows  from 

(1  -  a^'^Vl  -  a'-'^-')  S  (1  -  a*^'^^‘)(l  -  a’-'^-**‘) 

for  0£a<l  and  be  Z^.  Neither  V„  nor  will  have  changed, 
thus  the  expected  surviving  value  has  increased,  since  ^  ^ 

We  now  show  that  there  exists  no  Nx*;tNT',  that 

can  result  in  a  value  of  z*  that  is  less  than  or  equal  to  z’. 
Nx*<Nx'  contradicts  the  optimality  of  [N',  X*]  for  P',  since  a 
lower  could  have  been  obtained  in  P*  by  reallocating 
offensive  weapons  from  nodes  to  assets.  Now  consider 
Nx*>NxV  The  defensive  strategy  employed  in  response  is  as 
follows:  the  partition  of  defensive  weapons  between  and 
assets  remains  the  same,  and  only  the  least  attacked  node  is 
defended.  The  offense  will  then  split  its  (?  attack  as  evenly  as 
possible  between  the  control  nodes.  An  attack  level  as  high  as 
Nx*=2Nx*  (i.e.  attacking  one  of  the  nodes  in  a  fashion 
identical  to  the  optimal  solution  to  P')  will  still  not  achieve  an 
as  high  as  yet  will  reduce  both  and  Vj,  producing 
z*<z*.  Although  further  shifts  of  offensive  weapons  to  the 
attack  might  produce  an  ''^11  again  contradict  the 

optimality  of  [N’,  X*)  for  P',  since  an  greater  than 
could  have  been  obtained  with  2Nx‘  fewer  offensive  weapons 
aUocated  to  the  attack.  // 

Similarly,  we  have  the  following  two  theorems  for 
distributed  command  and  control  architectures: 

Theorem  3.2:  A  global  node  with  a  distributed  alternative 
command  and  control  capability  is  better  for  the  drfense  than  is 
a  single,  global  node. 

Theorem  3.3:  Distributed  command  and  control  is  less 
vulnerable  than  a  single,  global  capability. 

The  proof  of  these  propositions  follows  that  of  proposition  3.1. 

g.  .SUMMARY 

The  preferential  defense  of  differently  valued  assets  is  a 
complex  problem  in  its  own  right;  incorporating  0  nodes  in  the 
preferential  defense  paradigm  yields  ret  greater  complexity. 
This  is  due  in  pan  to  the  coupling  between  offensive  and 
defensive  strategies,  which  implies  that  a  nun-max  problem  must 
be  formulated  and  solved. 

'  Optimal  strategies,  such  as  a  decision  by  the  offense  on 
whether  to  ignore  or  attack  the  C3  system,  and  at  what  level. 


c 


depend  on  the  numerical  values  of  problem  parameters  (stockpile 
size,  kill  probabilities).  For  special  cases  it  is  possible  to  obtain 
approximations  to  the  truly  optimal  solution.  These  provide 
analytical  insights  as  well  as  initial  starting  conditions  for  more 


elaborate  computational  algorithms. 

This  is  an  ongoing  research  progress  report.  Analytical  and 
algorithmic  solutions  for  more  complex  problem  formulations 
are,  as  yet,  not  availabe. 
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